Privacy Policy – Personal Data Protection

In compliance with current regulations on Personal Data Protection, in particular with reference to the EU Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), and to the Organic Law 3/2018 of 5 December, on Personal Data Protection and guarantee of digital rights (“LOPDP”), users are hereby informed that the personal data you provide by means of email, sent via forms, private areas or by any other means or mechanism located on, or facilitated by this website, will be included in the data processing systems owned by Colegio Mayor Olarain, S.L. (NIF: ES-B20581138), hereinafter “OLARAIN” or “the Controller”, for the purposes of answering queries and dealing with requests that it receives, contacting you, managing all requested services (particularly as regards processing registration and accommodation bookings), commercial relationships and the legitimate interests and tasks that are inherent in its activity, as well as to send newsletters to which you may have subscribed and to send any future professional or commercial information that may be of interest to you.

Acceptance of this privacy policy necessarily entails your express consent to the processing of the described data, which may be kept without any time limits for the purposes set out in the previous paragraph, unless you specify otherwise.

The legal bases for the described data processing are, in the terms laid down in data protection regulations, your consent to data processing, the need to process your data in order to carry out the services you have requested, the fulfilment of legal obligations by the Controller, and/or the legitimate interest of the Controller, for example, for the purposes of sending you professional, commercial or similar information.

Your personal data will be processed confidentially. OLARAIN is committed to its users’ privacy and personal data protection, and it uses all its resources to ensure the interested parties’ safety and privacy, and it acts in line with the recommendations, reports, innovations and directives that the different data protection bodies provide, whether local, national or EU, as well as from other control bodies.

Among its accommodation services, OLARAIN offers its clients a series of optional services, aimed at making their stay as pleasant as possible. In order to provide these services, the Controller may have its own staff or rely on external collaborators. The user who hires these services gives their express consent to the Controller to pass on their data (ID, contact details and data related to the hired services and accommodation) to the people and companies collaborating with OLARAIN. Only those OLARAIN employees and collaborators who need to know this data to effectively provide each of the services you have requested may have access to said data.

The Controller does not require you to provide personal data to access the website, but the use of certain services on the website (booking application, registration form, etc.) do require the user to provide personal data, mostly ID and/or contact details.

Users provide their personal details freely and voluntarily. OLARAIN does not ask for any more personal information than is necessary to carry out the requested service.

Users who include any type of content on this website (data, documents, photographs or any other material) declare and guarantee that they do so in keeping with the conditions expressed herein and with current legislation. Users who include third parties’ personal data declare that they have the express and demonstrable consent of said third parties for the data to be processed.

In the case that some of our services are specifically aimed at minors, OLARAIN will request their parents or guardians’ consent to the collection of personal data or, where applicable, to the processing of said data.

The user is the sole responsible for the veracity, correction and legitimate processing of the included data, absolving OLARAIN of any responsibility to that effect. In all cases, the users guarantee and answer for the accuracy, current nature and authenticity of the personal data provided, and they undertake to keep said data duly updated.

The Controller will collect the personal data in a suitable and reliable manner, according to the purposes, uses, services and/or provisions included on the website, in a specific, explicit and legal way. Under no circumstances shall it use fraudulent, unfair, illicit or which, in any way, could endanger the users’ legitimate rights.

Sending information via this website necessarily entails express authorisation for the data described in this privacy policy and in the general conditions of the website to be processed.

Any user who provides their CV via this website gives their express consent for their data to be included in the data processing system called “CVs and Recruitment”. Their data may be used to include them in the company’s future recruitment processes. Likewise, their data may be passed on to external companies hired by OLARAIN for recruitment purposes.

You may exercise your rights of access, rectification, erasure, restriction of processing, portability and objection, or withdraw your consent or any other request regarding this matter, by writing to the Controller, OLARAIN at Paseo de Ondarreta, 24, 20018 Donostia San Sebastián (Gipuzkoa), telephone number (+34) 943003300, or at the email address olarain@olarain.com.

The request must be accompanied by a copy of the document that proves the person in question’s identity (DNI/ID/passport or similar). If you submit the request as a legal representative, you must also attach a copy of the document that proves this representation, as well as the document proving the identity of the person placing the request.

The supervisory authority to which you may write in the event that you are not in agreement with the decision regarding requests, or to file a complaint, is the Spanish Data Protection Agency: www.aepd.es

In processing the personal data received, OLARAIN will adopt all the technical and organisational measures necessary to ensure the data is secure and to prevent their alteration, loss, unauthorised access or processing, bearing in mind the state of technology, the nature of the stored data and the risks to which they are exposed, whether due to human intervention or the physical or natural environment, in accordance with current legislation that applies in the case of security measures for personal data processing, particularly those set by the GDPR, LOPDP and their development regulations. However, the users are hereby informed that the IT security measures are not impenetrable, and the users are not entirely safe from any possible illegal or improper intrusions, which would not be OLARAIN’s responsibility.

In order to offer a better service through this website, the user’s IP address and other device details may be recorded, so that the data can be analysed at a later date to analyse the number of pages visited, the number of visits, the activity of the website viewers/users, and the frequency of use, among other things.

Users give their prior, informed consent to the IP address and other device details being recorded during the connection and while browsing the website, without it being necessary to request said consent every time the user accesses this website.

This website offers links to social media and external web feeds and sites, such as Facebook and Twitter, among others. OLARAIN accepts no responsibility as regards these linked sites. The user who accesses social media and external web feeds and sites associated with OLARAIN from the links situated on this website, or in any other way, is expressly informed beforehand that the conditions of use, privacy policies, cookie policy and any other conditions and/or regulations are the responsibility of the bodies that are responsible for those social media sites and web feeds, and not OLARAIN.

OLARAIN reserves the right to modify this privacy policy according to its own criteria, to changes in legislation or in case law. If the Controller makes any modification, the new text will be published in this same website, where the user can read it for themselves. In any case, the relationship with the users will be governed by the rules in place at the precise moment in which the user accesses the website. That is why the Controller recommends you read this privacy policy every time you connect to the website.

The relationships established between OLARAIN and the user shall be governed by the provisions laid down in current regulations regarding the applicable legislation and the competent jurisdiction. Nevertheless, for cases in which the regulations foresee the possibility of the parties submitting to a jurisdiction, OLARAIN and the user, expressly waiving any other jurisdiction that may correspond, submit to the Courts and Tribunals of Donostia San Sebastián (Gipuzkoa).

OLARAIN will pursue any breach of this Privacy Policy, as well as any improper use of the contents on its website, exercising all civil and criminal actions to which it may be entitled by law, including those of an economic nature.